Lucene search
+L
IbmMost viewed

37227 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/01/13 7:45 a.m.60 views

Security Bulletin: Multiple vulnerabilities in Apache log4j affect the IBM WebSphere Application Server which is shipped with IBM Intelligent Operations Center (CVE-2021-45105, CVE-2021-44832).

Summary IBM WebSphere® Application Server is shipped with IBM® Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

9CVSS2.8AI score0.99999EPSS
SaveExploits46Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/01/07 4:30 a.m.60 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Rational ClearCase (CVE-2021-45105, CVE-2021-44832)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Rational ClearCase. Information about security vulnerabilities affecting WAS have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

8.5CVSS1.5AI score0.99999EPSS
SaveExploits23Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/01/04 8:36 p.m.60 views

Security Bulletin: Vulnerability in Netty affects IBM Cloud Private (CVE-2021-21295)

Summary There is a vulnerability in the Netty open source library. The library is used by IBM Cloud Private logging. This bulletin identifies the security fixes to apply to address the Netty vulnerability CVE-2021-21295. Vulnerability Details CVEID: CVE-2021-21295 DESCRIPTION: Netty is vulnerable...

5.9CVSS6.1AI score0.18891EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/15 7:41 a.m.60 views

Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in busybox, arpwatch, apr, acpid, augeas, firefox, ctdb.

Summary WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in busybox, arpwatch, apr, acpid, augeas, firefox, ctdb. These vulnerabilities are addressed in App connect professional v7.5.4.0 and v7.5.5.0, customer can migrate to these versions without incurring any...

10CVSS10.8AI score0.55874EPSS
SaveExploits21Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/20 10:55 p.m.60 views

Security Bulletin: Vulnerabilities in OpenSSL affect AIX (CVE-2021-23839, CVE-2021-23840, and CVE-2021-23841)

Summary There are vulnerabilities in OpenSSL used by AIX. Vulnerability Details CVEID: CVE-2021-23839 DESCRIPTION: OpenSSL could provide weaker than expected security, caused by incorrect SSLv2 rollback protection that allows for the inversion of the logic during a padding check. If the server is...

7.5CVSS0.9AI score0.50732EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/23 1:31 a.m.60 views

Security Bulletin: Multiple vulnerabilities in tomcat affect Power Hardware Management Console

Summary Tomcat is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-5345 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by an error when accessing a protected directory. By...

8.8CVSS8.2AI score0.1838EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/08/04 11:56 p.m.60 views

Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2021-3449 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference in signaturealgorithms processing. By...

5.9CVSS1.1AI score0.62906EPSS
SaveExploits3Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/30 9:12 p.m.60 views

Security Bulletin: Potential vulnerability in OpenSSL

Summary A potential vulnerability has been identified related to OpenSSL. Refer to details for additional information. Vulnerability Details CVEID: CVE-2021-3449 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference in signaturealgorithms processing. By...

7.4CVSS1.6AI score0.62906EPSS
SaveExploits4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/21 8:35 p.m.60 views

Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by vulnerabilities in libxml2

Summary BM Bootable Media Creator BoMC has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2020-7595 DESCRIPTION: The Gnome Project Libxml2 is vulnerable to a denial of service, caused by an error in xmlStringLenDecodeEntities in parser.c. An attacker could exploit this...

7.5CVSS1.7AI score0.07836EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/16 6:32 a.m.60 views

Security Bulletin: IBM Waston Machine Learning Acclerator is affected by OpenSSL vulnerabilities

Summary There are vulnerabilities in OpenSSL used by IBM Watson Machine Learning Accelerator. IBM Watson Machine Learning Accelerator has addressed the applicable CVEs: CVE-2021-23839, CVE-2021-23840, CVE-2021-23841. Vulnerability Details Refer to the security bulletins listed in the...

7.5CVSS2.1AI score0.50732EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/29 11:03 a.m.60 views

Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to multiple denial of service and HTTP request smuggling vulnerabilities

Summary App Connect Enterprise flows may be susceptible to denial of service attacks due to CVE-2020-1971 and CVE-2020-8265 in the Node.js runtime, and all components may be vulnerable to HTTP request smuggling due to CVE-2020-8287. Vulnerability Details CVEID: CVE-2020-1971 DESCRIPTION: OpenSSL ...

8.1CVSS0.7AI score0.16296EPSS
SaveExploits6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/28 6:35 p.m.60 views

Security Bulletin: Security vulnerabilities in Apache Tomcat affect multiple IBM Rational products based on IBM's Jazz technology

Summary The Jazz Team Server is shipped with/or supports versions of the Apache Tomcat web server which contain security vulnerabilities that could potentially impact the following IBM Rational products deployed on Apache Tomcat: Collaborative Lifecycle Management CLM, Rational DOORS Next...

7.5CVSS0.4AI score0.0807EPSS
SaveExploits0Affected Software7
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/26 9:17 p.m.60 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM License Metric Tool and IBM Tivoli Asset Discovery for Distributed (CVE-2016-3092)

Summary IBM WebSphere Application Server is shipped with IBM License Metric Tool and IBM Tivoli Asset Discovery for Distributed. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security...

7.8CVSS0.8AI score0.35927EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/26 9:17 p.m.60 views

Security Bulletin: IBM License Metric Tool v7.2.2 and v7.5 and IBM Tivoli Asset Discovery for Distributed v7.2.2 and v7.5 are vulnerable to Padding Oracle On Downgraded Legacy Encryption (POODLE) attack on TLS connections (CVE-2014-8730)

Summary TLS protocol support used in IBM License Metric Tool and IBM Tivoli Asset Discovery for Distributed is vulnerable to POODLE TLS attack CVE-2014-8730. This attack enables a man-in-the-middle attacker to decrypt and intercept communications, including user-server and agent-server messages...

4.3CVSS4.1AI score0.1372EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/13 1:33 p.m.60 views

Security Bulletin: Vulnerabilities in Apache Struts affect IBM Tivoli Application Dependency Discovery Manager.

Summary Vulnerabilities in Apache Struts affect IBM Tivoli Application Dependency Discovery Manager CVE-2019-0233, CVE-2019-0230 Vulnerability Details CVEID: CVE-2019-0233 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by an access permission override when performing a fi...

9.8CVSS1.2AI score0.97112EPSS
SaveExploits15Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/13 10:45 a.m.60 views

Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2021-25122, CVE-2021-25329)

Summary Multiple vulnerabilities in Open Source Apache Tomcat reported by The Apache Software Foundation affect IBM Tivoli Application Dependency Discovery Manager TADDM Vulnerability Details CVEID: CVE-2021-25122 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive...

7.5CVSS0.9AI score0.18114EPSS
SaveExploits17Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/01 10:28 p.m.60 views

Security Bulletin: Multiple vulnerabilities in Node.js affect IBM InfoSphere Information Server

Summary Muiltiple vulnerabilities in Node.js that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID: CVE-2021-22884 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by an error when the allowlist includes "localhost6". By controlling the...

8.1CVSS0.4AI score0.74352EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/25 10:38 a.m.60 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM License Metric Tool. These issues were disclosed as part of the IBM Java SDK updates in Jan 2021. Vulnerability Details CVEID: CVE-2020-14803 DESCRIPTION: An unspecified vulnerability in Java SE...

9.8CVSS1.1AI score0.03186EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/25 10:10 a.m.60 views

Security Bulletin: Multiple vulnerabilities in node.js may affect configuration editor used in IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-1971, CVE-2020-8265, CVE-2020-8287

Summary Security vulnerabilities have been reported for Node.js. IBM Business Automation Workflow and IBM BPM include a stand-alone tool for editing configuration properties files that is based on IBM SDK for Node.js. Vulnerability Details CVEID: CVE-2020-1971 DESCRIPTION: OpenSSL is vulnerable t...

8.1CVSS0.8AI score0.74352EPSS
SaveExploits8Affected Software4
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/13 3:48 p.m.60 views

Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics

Summary GNU binutils is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs by upgrading GNU binutils to latest version 2.35. Vulnerability Details CVEID: CVE-2020-35495 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by NULL pointer...

7.8CVSS1.3AI score0.02752EPSS
SaveExploits29Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/04 10:16 a.m.60 views

Security Bulletin: A security vulnerability has been identified in PCRE, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-14155)

Summary A security vulnerability has been disclosed in the pcre library libpcre, which is installed as part of IBM Tivoli Network Manager version 4.2. Information about this vulnerability has been published in a security bulletin. Vulnerability Details CVEID: CVE-2020-14155 DESCRIPTION: PCRE coul...

5.3CVSS0.7AI score0.04182EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/11/02 7:50 p.m.60 views

Security Bulletin: IBM Security Directory Suite vulnerable to information disclosure (CVE-2018-15473)

Summary Security vulnerability that could allow a remote attacker to obtain sensitive information, has been fixed and delivered in IBM Security Directory Suite. Vulnerability Details CVEID: CVE-2018-15473 DESCRIPTION: OpenSSH could allow a remote attacker to obtain sensitive information, caused b...

5.3CVSS1.1AI score0.98631EPSS
SaveExploits26Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/27 3:51 p.m.60 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Developer for System z (CVE-2015-0138, CVE-2015-0410, CVE-2014-6593)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 6 and 7 that is used by Rational Developer for System z. These issues were disclosed as part of the IBM Java SDK updates in January 2015. This bulletin also addresses the “FREAK: Factoring Attack on RSA-EXPO...

5CVSS0.9AI score0.66374EPSS
SaveExploits6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/08/31 1:34 p.m.60 views

Security Bulletin: Vulnerabilities in Faster-XML jackson-databind affect IBM Operations Analytics Predictive Insights

Summary Faster-XML Jackson-databind is used by IBM Operations Analytics Predictive Insights. IBM Operations Analytics Predictive Insights has addressed the applicable CVEs. Note that the usage of Jackson-databind within IBM Operations Analytics Predictive Insights is limited to the REST Mediation...

8.8CVSS2.4AI score0.08028EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 5:07 p.m.60 views

Security Bulletin: Multiple Security Vulnerabilities in Jackson-databind Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed multiple security vulnerabilities in jackson-databind Vulnerability Details CVEID: CVE-2019-17267 DESCRIPTION: FasterXML jackson-databind could provide weaker than expected security, caused by a polymorphic typing issue in the...

10CVSS1.4AI score0.12679EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/17 3:48 p.m.60 views

Security Bulletin: Addressing the Sqlite Vulnerability CVE-2020-11656, CVE-2020-11655

Summary IBM Tivoli Composite Application Manager ITCAM for Transactions - Transaction Tracking has addressed the following SQLite vulnerability: Vulnerability Details CVEID: CVE-2020-11656 DESCRIPTION: SQLite could allow a remote attacker to obtain sensitive information, caused by a use-after-fre...

9.8CVSS1.2AI score0.0761EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/07 4:58 p.m.60 views

Security Bulletin: Multiple vulnerabilities in Open Source used in IBM Cloud Pak System

Summary Multiple vulnerabilities identified in Open Source used in IBM Cloud Pak System. IBM Cloud Pak System addressed vulnerabilities. Vulnerability Details CVEID: CVE-2018-11771 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by the failure to return the corre...

9.8CVSS1.4AI score0.99032EPSS
SaveExploits9Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/06/29 10:30 a.m.60 views

Security Bulletin: A vulnerability in the IBM Java Runtime affects IBM Rational ClearQuest (CVE-2020-2654)

Summary There is a vulnerability in the IBM® Runtime Environment Java™ Versions 7 and 8, which are used by IBM Rational ClearQuest. This issue was disclosed as part of the IBM Java SDK updates in January 2020 deferred from Oracle Jan 2020 CPU. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTIO...

6.8CVSS1.3AI score0.03823EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/05/07 4:06 p.m.60 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect ITCAM for SOA (Jan 2020)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6/7 used by ITCAM for SOA. ITCAM for SOA has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker ...

8.1CVSS2.1AI score0.04903EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/05/06 11:00 a.m.60 views

Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System

Summary Open Source OpenSSH is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-15473 DESCRIPTION: OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an...

5.3CVSS1.1AI score0.98631EPSS
SaveExploits26Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/04/20 2:39 p.m.61 views

Security Bulletin: A Security vulnerability has been identified in Apache HTTP Server used by Rational Build Forge. (CVE-2017-9798)

Summary Apache HTTP Server has security vulnerability caused due to error in the HTTP Option method. Respective security vulnerability is discussed in detail in the subsequent section. Vulnerability Details CVEID: CVE-2017-9798 DESCRIPTION: Apache HTTP Server could allow a remote attacker to obta...

7.5CVSS0.94999EPSS
SaveExploits9Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/04/20 2:38 p.m.60 views

Security Bulletin: Security vulnerabilities in OpenSSL used by Rational Build Forge (CVE-2017-3737 and CVE-2017-3738)

Summary OpenSSL, used by Rational Build Forge, has security vulnerabilities that allows a remote attacker to exploit the application. Respective security vulnerabilities are discussed in detail in the subsequent sections. Vulnerability Details CVEID: CVE-2017-3738 DESCRIPTION: OpenSSL could allow...

5.9CVSS0.5AI score0.83645EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/04/14 11:34 a.m.60 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Performance Management. IBM Performance Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-11772 DESCRIPTION: In Eclipse OpenJ9 prior to 0.15, the String.getBytesint, int,...

9.8CVSS0.5AI score0.09393EPSS
SaveExploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/03/13 11:00 p.m.60 views

Security Bulletin: Multiple vulnerabilities affect IBM PureApplication System

Summary There are multiple vulnerabilities that affect IBM PureApplication System. IBM PureApplication System has addressed vulnerabilities. Vulnerability Details CVEID: CVE-2016-5699 DESCRIPTION: urllib2 and urllib for Python are vulnerable to HTTP header injection, caused by improper validation...

10CVSS1.3AI score0.49727EPSS
SaveExploits10Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/22 10:34 a.m.60 views

Security Bulletin: WebSphere Liberty susceptible to HTTP2 implementation vulnerablility.

Summary IBM Worklight/MobileFoundation has addressed the following vulnerability. WebSphere Liberty susceptible to HTTP2 implementation vulnerablility. Vulnerability Details CVEID: CVE-2019-9515 DESCRIPTION: Multiple vendors are vulnerable to a denial of service, caused by a Settings Flood attack...

7.8CVSS1AI score0.87399EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/13 11:52 p.m.60 views

Security Bulletin: Multiple security vulnerabilities in Open Source Apache Tomcat affect IBM Cognos Business Viewpoint (CVE-2014-0227, CVE-2014-0230, CVE-2014-7810)

Summary There are multiple vulnerabilities in Open Source Apace Tomcat that is used by IBM Cognos Business Viewpoint, These were disclosed in the 02/09/2015, 04/09/2015 and 05/14/2015 X-Force Reports. IBM Cognos Business Viewpoint has addressed the applicable CVEs. Vulnerability Details CVEID:...

7.8CVSS0.6AI score0.21045EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/11 9:31 p.m.60 views

Security Bulletin: Security Vulnerabilities have been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2012-5783, CVE-2018-1614, CVE-2014-0114, CVE-2015-0899)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting Websphere Application Server has been published in security bulletins. Vulnerability Details Please consult the security bulletins: Security Bulletin:...

7.5CVSS0.8AI score0.99032EPSS
SaveExploits4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/07 2:12 a.m.60 views

Security Bulletin: Aspera Web Applications (Faspex, Console) are affected by Apache Vulnerabilities (CVE-2019-0196, CVE-2019-0197, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220)

Summary Aspera Web Applications Faspex, Console have addressed the following Apache Vulnerabilities. Vulnerability Details CVEID: CVE-2019-0220 DESCRIPTION: A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive...

7.5CVSS0.7AI score0.19964EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/05 12:53 a.m.60 views

Security Bulletin: Multiple Security Vulnerabilities in Jetty Affect IBM Sterling B2B Integrator

Summary There are multiple security vulnerabilities in Jetty that affect IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2017-7658 DESCRIPTION: Eclipse Jetty is vulnerable to HTTP request smuggling, caused by a flaw when handling more than one Content-Length headers. By sending a...

9.8CVSS0.4AI score0.19362EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/04 4:40 p.m.60 views

Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearQuest (CVE-2017-7679, CVE-2017-7668, CVE-2017-3167)

Summary IBM HTTP Server IHS is shipped as a component of IBM Rational ClearQuest. Information about security vulnerabilities affecting IHS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section. Affected Products an...

9.8CVSS1.3AI score0.57472EPSS
SaveExploits4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/20 4:10 p.m.60 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Tivoli Netcool Configuration Manager (ITNCM)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 that is used by ITNCM. This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption POODLE SSLv3 vulnerability CVE-2014-3566. These were disclosed as part of the IBM Java...

4.3CVSS0.8AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/20 8:47 a.m.60 views

Security Bulletin: IBM Tivoli Netcool Impact is affected by a jQuery vulnerability (CVE-2015-9251)

Summary IBM Tivoli Netcool Impact has addressed the following jQuery vulnerability. Vulnerability Details CVEID: CVE-2015-9251 DESCRIPTION: jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing...

6.1CVSS1.1AI score0.29726EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/18 2:26 p.m.60 views

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM i

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM i. IBM i has addressed the applicable CVEs including the “DROWN: Decrypting RSA with Obsolete and Weakened eNcryption" vulnerability. Vulnerability Details CVEID: CVE-2016-0800...

10CVSS1.3AI score0.82112EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/18 2:26 p.m.60 views

Security Bulletin: Vulnerabilities CVE-2018-0732 and CVE-2018-0737 in OpenSSL affect IBM i

Summary OpenSSL is used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the sending of a very large prime value to the client by a malicious server during key agreement in a TLS...

7.5CVSS1AI score0.48831EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/18 2:26 p.m.60 views

Security Bulletin: Multiple Vulnerabilities in Samba affect IBM i

Summary Samba is supported on IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-10918 DESCRIPTION: Samba is vulnerable to a denial of service, caused by a NULL pointer dereference when checking database outputs from the LDB database layer. If Samba is in an...

8.8CVSS1.2AI score0.10839EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/11/05 10:28 p.m.60 views

Security Bulletin: IBM RackSwitch firmware products are affected by TCP denial of service vulnarabilities

Summary The IBM RackSwitch firmware products listed below have addressed the following TCP denial of service vulnerabilities. Vulnerability Details CVEID: CVE-2019-11478 DESCRIPTION: Jonathan Looney discovered that the TCP retransmission queue implementation in tcpfragment in the Linux kernel cou...

7.8CVSS1AI score0.98745EPSS
SaveExploits4Affected Software7
IBM Security Bulletins
IBM Security Bulletins
added 2019/08/13 7:08 p.m.60 views

Security Bulletin: IBM MQ Appliance is affected by OpenSSH vulnerabilities

Summary IBM MQ Appliance has addressed vulnerabilities in OpenSSH. Vulnerability Details CVEID: CVE-2016-10009 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to execute arbitrary code on the system, caused by the loading of a specially crafted PKCS11 module across a forwarded...

7.8CVSS1.5AI score0.88944EPSS
SaveExploits22Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/04/25 7:45 a.m.60 views

Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities

Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2018-11759 DESCRIPTION: Apache Tomcat JK modjk Connector could allow a remote attacker to traverse directories on the system, caused by the improper handli...

8.1CVSS0.8AI score0.90647EPSS
SaveExploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/04/02 3:50 p.m.60 views

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments: Data Protection for VMware (CVE-2018-0737, CVE-2018-0732)

Summary OpenSSL vulnerabilities were disclosed on April 16, 2018 and June 16, 2018 by the OpenSSL Project. OpenSSL, used by the IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client and IBM Spectrum Protect for Virtual Environments formerly Tivoli Storage Manager for Virtual...

7.5CVSS1AI score0.48831EPSS
SaveExploits0Affected Software4
IBM Security Bulletins
IBM Security Bulletins
added 2019/03/05 12:59 p.m.60 views

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Personal Communications (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM Personal Communications. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit...

5CVSS6.5AI score0.73851EPSS
SaveExploits0Affected Software1
Total number of security vulnerabilities5000